{"id":258600,"date":"2024-10-19T17:07:15","date_gmt":"2024-10-19T17:07:15","guid":{"rendered":"https:\/\/pdfstandards.shop\/product\/uncategorized\/bsi-pd-iso-tr-237912019\/"},"modified":"2024-10-25T12:45:02","modified_gmt":"2024-10-25T12:45:02","slug":"bsi-pd-iso-tr-237912019","status":"publish","type":"product","link":"https:\/\/pdfstandards.shop\/product\/publishers\/bsi\/bsi-pd-iso-tr-237912019\/","title":{"rendered":"BSI PD ISO\/TR 23791:2019"},"content":{"rendered":"<p>This document presents the assessment of the safety, security, competition, responsibilities, and data protection risks that can originate from the <span class=\"std\"><span class=\"std-ref\">ISO\u00c3?\u00c2&nbsp;20078<\/span><\/span> series.<\/p>\n<p>In particular, the following risks are outside the scope of this assessment, because they relate to elements that are excluded from the scope of the <span class=\"std\"><span class=\"std-ref\">ISO\u00c3?\u00c2&nbsp;20078\u00c3?\u00c2&nbsp;series<\/span><\/span>:<\/p>\n<ul>\n<li>\n<p>the risks associated with the implementation of the <span class=\"std\"> <span class=\"std-ref\">ISO\u00c3?\u00c2&nbsp;20078\u00c3?\u00c2&nbsp;series<\/span><\/span> ;<\/p>\n<\/li>\n<li>\n<p>the risks associated with the process that the accessing parties or any other parties would later on use to communicate the information they obtained;<\/p>\n<\/li>\n<li>\n<p>the risks associated with the process used by the resource owner to provide, modify, or revoke their authorization to pass information;<\/p>\n<\/li>\n<li>\n<p>the risks associated with the mitigation of the risks, should such a mitigation be necessary.<\/p>\n<\/li>\n<\/ul>\n<h4>PDF Catalog<\/h4>\n<table border=\"1px\" class=\"des-table\">\n<tr>\n<th>PDF Pages<\/th>\n<th>PDF Title<\/th>\n<\/tr>\n<tr>\n<td><b>2<b><\/td>\n<td>undefined  <\/td>\n<\/tr>\n<tr>\n<td><b>7<b><\/td>\n<td>Foreword  <\/td>\n<\/tr>\n<tr>\n<td><b>8<b><\/td>\n<td>Introduction  <\/td>\n<\/tr>\n<tr>\n<td><b>9<b><\/td>\n<td>1 Scope <br \/> 2 Normative references <br \/> 3 Terms, definitions and abbreviated terms <br \/> 3.1 Terms and definitions  <\/td>\n<\/tr>\n<tr>\n<td><b>11<b><\/td>\n<td>3.2 Abbreviated terms <br \/> 4 General result of the risk assessment <br \/> 5 Categories of the assessed risks <br \/> 6 \u200bAssessment of the risks related to the safety of the persons and the goods during the ExVe life cycle <br \/> 6.1 Safety risks considered  <\/td>\n<\/tr>\n<tr>\n<td><b>12<b><\/td>\n<td>6.2 Analysis of the situation presented by the ISO 20078 series <br \/> 6.2.1 SAFE 1: Possible overload of the electronic system of the moving vehicle (numerous requests) <br \/> 6.2.2 SAFE 2: Possible overload of the electronic system of the moving vehicle (frequent requests)  <\/td>\n<\/tr>\n<tr>\n<td><b>13<b><\/td>\n<td>6.2.3 SAFE 3: Possible overload of the electronic system of the moving vehicle (unexpected requests) <br \/> 6.2.4 SAFE 4: Possible illicit or malicious remote control of vehicles <br \/> 6.2.5 SAFE 5: Lack of compatibility with the existing systems and mechanisms  <\/td>\n<\/tr>\n<tr>\n<td><b>14<b><\/td>\n<td>6.2.6 SAFE 6: Failures of the remote communication solution itself of the ExVe (including the back-end system of the manufacturer) <br \/> 6.2.7 SAFE 7: Lack of consideration of the complete ExVe life cycle <br \/> 6.2.8 SAFE 8: Risks related to the design validation process <br \/> 6.2.9 SAFE 9: Lack of misuse prevention  <\/td>\n<\/tr>\n<tr>\n<td><b>15<b><\/td>\n<td>6.2.10 SAFE 10: Lack of, or inappropriate measures aiming at reducing the risks in case of illicit or malicious remote control of vehicles <br \/> 6.3 Conclusion: Assessment of the safety risks possibly originating from the ISO 20078 series  <\/td>\n<\/tr>\n<tr>\n<td><b>16<b><\/td>\n<td>7 \u200bAssessment of the risks associated to the security of the ExVe communication system <br \/> 7.1 Security risks considered <br \/> 7.2 Analysis of the situation presented by the ISO 20078 series <br \/> 7.2.1 General considerations relative to the specification of the OAuth2 framework <br \/> 7.2.2 General consideration related to cybersecurity <br \/> 7.2.3 SEC 1: Risks related to integrity and authenticity  <\/td>\n<\/tr>\n<tr>\n<td><b>17<b><\/td>\n<td>7.2.4 SEC 2: Security risks at vehicle systems that are not located at the moving vehicle <br \/> 7.2.5 SEC 3: Risks related to the consequences of a complete or partial cybersecurity breach (this includes safety, security, competition, confidentiality and data protection risks) <br \/> 7.2.6 SEC 4: Lack of misuse prevention measures  <\/td>\n<\/tr>\n<tr>\n<td><b>18<b><\/td>\n<td>7.3 Conclusion: Assessment of the security risks possibly originating from the ISO 20078 series <br \/> 8 \u200bAssessment of the risks associated to the fair competition among the concerned actors <br \/> 8.1 Competition risks considered <br \/> 8.2 Analysis of the situation presented by the ISO 20078 series <br \/> 8.2.1 Involved actors  <\/td>\n<\/tr>\n<tr>\n<td><b>19<b><\/td>\n<td>8.2.2 FAIR 1: Possible misuse of the acquired knowledge <br \/> 8.2.3 FAIR 2: Possible gaining of unique knowledge of the market through monitoring  <\/td>\n<\/tr>\n<tr>\n<td><b>20<b><\/td>\n<td>8.2.4 FAIR 3: Possible gaining of unique knowledge of the customer\u2019s behaviour through monitoring <br \/> 8.2.5 FAIR 4: Competition risks among the involved parties <br \/> 8.2.6 FAIR 5: Risk of excluding competitors from playing roles <br \/> 8.2.7 FAIR 6: Risks related to the development of new after-sales applications  <\/td>\n<\/tr>\n<tr>\n<td><b>21<b><\/td>\n<td>8.2.8 FAIR 7: Competition risks among manufacturers and\/or vehicle components (systems) suppliers <br \/> 8.3 Conclusion: Assessment of the competition risks possibly originating from the ISO 20078 series <br \/> 9 \u200bAssessment of the risks related to the responsibility of the concerned actors <br \/> 9.1 Liability and responsibility  <\/td>\n<\/tr>\n<tr>\n<td><b>22<b><\/td>\n<td>9.2 Analysis of the situation presented by the ISO 20078 series <br \/> 9.3 Conclusion: Assessment of the risks related to the responsibility of the concerned actors possibly originating from the ISO 20078 series <br \/> 10 \u200bAssessment of the risks related to the protection of the resources owned by the resource owner (data protection) <br \/> 10.1 Data protection risks considered  <\/td>\n<\/tr>\n<tr>\n<td><b>23<b><\/td>\n<td>10.2 Analysis of the situation presented by the ISO 20078 series  <\/td>\n<\/tr>\n<tr>\n<td><b>24<b><\/td>\n<td>10.3 Conclusion: Assessment of the risks related to the protection of the resources owned by the resource owner and possibly originating from the ISO 20078 series (data protection risks)  <\/td>\n<\/tr>\n<tr>\n<td><b>25<b><\/td>\n<td>Annex A (informative)  Assessment of safety risks  <\/td>\n<\/tr>\n<tr>\n<td><b>34<b><\/td>\n<td>Annex B (informative)  Assessment of security risks  <\/td>\n<\/tr>\n<tr>\n<td><b>37<b><\/td>\n<td>Annex C (informative)  Assessment of competition risks  <\/td>\n<\/tr>\n<tr>\n<td><b>43<b><\/td>\n<td>Annex D (informative)  Assessment of the risks related to responsibility and liability of the concerned actors  <\/td>\n<\/tr>\n<tr>\n<td><b>45<b><\/td>\n<td>Annex E (informative)  Assessment of data protection risks  <\/td>\n<\/tr>\n<tr>\n<td><b>47<b><\/td>\n<td>Bibliography  <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p><b>Road vehicles. Extended vehicle (ExVe) web services. Result of the risk assessment on ISO 20078 series<\/b><\/p>\n<table class=\"shortdes-table\" style=\"width: 100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td>Published By<\/td>\n<td>Publication Date<\/td>\n<td>Number of Pages<\/td>\n<\/tr>\n<tr>\n<td><a href=\"https:\/\/pdfstandards.shop\/product-category\/publishers\/bsi\/\"><b>BSI<\/b><\/a><\/td>\n<td>2019<\/td>\n<td>48<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"featured_media":258603,"template":"","meta":{"rank_math_lock_modified_date":false,"ep_exclude_from_search":false},"product_cat":[742,2641],"product_tag":[],"class_list":{"0":"post-258600","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-43-040-15","7":"product_cat-bsi","9":"first","10":"instock","11":"sold-individually","12":"shipping-taxable","13":"purchasable","14":"product-type-simple"},"_links":{"self":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product\/258600","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product"}],"about":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/types\/product"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media\/258603"}],"wp:attachment":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media?parent=258600"}],"wp:term":[{"taxonomy":"product_cat","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_cat?post=258600"},{"taxonomy":"product_tag","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_tag?post=258600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}